GO-2026-4845
- Source
- https://pkg.go.dev/vuln/GO-2026-4845
- Import Source
- https://vuln.go.dev/ID/GO-2026-4845.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2026-4845
- Aliases
-
- CVE-2026-4404
- GHSA-hj7x-hmf2-hc2p
- Published
- 2026-03-26T20:33:05Z
- Modified
- 2026-03-26T21:04:00.693700Z
- Summary
- Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor
- Details
-
Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor
- Database specific
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-4845" }- References
-
- https://github.com/advisories/GHSA-hj7x-hmf2-hc2p
- https://nvd.nist.gov/vuln/detail/CVE-2026-4404
- https://github.com/goharbor/harbor/pull/22751
- https://github.com/goharbor/harbor/issues/1937
- https://goharbor.io/docs/1.10/install-config/run-installer-script/#:~:text=If%20you%20did%20not%20change%20them%20in%20harbor.yml,%20the%20default%20administrator%20username%20and%20password%20are%20admin%20and%20Harbor12345
- https://www.kb.cert.org/vuls/id/577436
Affected packages
Go / github.com/goharbor/harbor
Package
- Name
- github.com/goharbor/harbor
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/goharbor/harbor